From 098602163498b06ec865ab02625cc0ba19f43786 Mon Sep 17 00:00:00 2001
From: Attila Molnar
Date: Sat, 28 Jun 2014 18:25:05 +0200
Subject: Add InspIRCd::TimingSafeCompare() function that compares strings in a
 timing-safe way

---
 src/inspstring.cpp | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

(limited to 'src/inspstring.cpp')

diff --git a/src/inspstring.cpp b/src/inspstring.cpp
index 7fa4762c5..b59492738 100644
--- a/src/inspstring.cpp
+++ b/src/inspstring.cpp
@@ -108,3 +108,19 @@ std::string Base64ToBin(const std::string& data_str, const char* table)
 	}
 	return rv;
 }
+
+bool InspIRCd::TimingSafeCompare(const std::string& one, const std::string& two)
+{
+	if (one.length() != two.length())
+		return false;
+
+	unsigned int diff = 0;
+	for (std::string::const_iterator i = one.begin(), j = two.begin(); i != one.end(); ++i, ++j)
+	{
+		unsigned char a = static_cast<unsigned char>(*i);
+		unsigned char b = static_cast<unsigned char>(*j);
+		diff |= a ^ b;
+	}
+
+	return (diff == 0);
+}
-- 
cgit v1.3.1-10-gc9f91